Paste or upload a dependency manifest — or a CycloneDX / SPDX SBOM — and instantly see which packages carry known vulnerabilities, checked against the Gold corpus. Free, no login, and nothing leaves your browser.
Paste or upload a file — it's parsed in your browser and never sent to a server. Checks up to 100 dependencies against the Gold corpus.